How to self-elevate an application to a high privilege level under UAC

INTRODUCTION

This article describes an All-In-One Code Framework sample that is available for downloading. The code sample is related to User Account Control (UAC), a security component in Windows Vista and in newer versions of Windows operating systems. When UAC is fully enabled, interactive administrators typically run with the least user privileges. This code sample shows how to self-elevate an application to a high privilege level by giving explicit consent through the Consent UI.

Difficulty level

Download information

To download this code sample, click the following link:

Technical overview

UAC was introduced in Windows Vista. When UAC is fully enabled, interactive administrators typically run with the least user privileges. However, interactive administrators can self-elevate by giving explicit consent with the Consent UI. Interactive administrators perform administrative tasks that include installing software and drivers, changing system-wide settings, viewing or changing other user accounts, and running administrative tools.

This code sample shows the following technical points in three popular programming languages (Visual C++, Visual C#, Visual Baisc.NET):

How to display a UAC shield icon on the UI for tasks that require elevation.

How to self-elevate the current process.

How to automatically elevate the process when it starts up.

Demonstration

Follow these steps for a demonstration of this UAC code sample:

After you successfully build the sample project in Visual Studio 2008, you receive the following application files, depending on the programming language that you are using:

CppUACSelfElevation.exe

CSUACSelfElevation.exe

VBUACSelfElevation.exe

Run the application as a protected administrator in a Windows Vista or Windows 7 system that has UAC fully enabled. The application should display the following content in the main dialog box:Note There is a UAC shield icon on the Self-elevate button.

Click the Self-elevate button. Then, you see the following Consent UI:

Click Yes to approve the elevation. Then, the original application restarts, running as an elevated administrator.

Close the application.

Note For more information about how to create the sample application, see the Readme.txt file that is included in the download package.

Technology category

Security

Languages

This code sample contains the following programming languages.

Language

Project Name

Visual C++ .NET

CppUACSelfElevation

Visual C#

CSUACSelfElevation

Visual Basic .NET

VBUACSelfElevation

Prerequisites

You must run this code sample in Windows Vista or in a later Windows operating systems.

This sample application was created by using Visual Studio 2008 with Service Pack 1 installed.

Tags

UAC

More information

What is All-In-One Code Framework?

All-In-One Code Framework uses code samples in different programming languages to illustrate most Microsoft development techniques. Each code sample is carefully selected, composed, and documented to show common code scenarios. For more information about All-In-One Code Framework, visit the following All-In-One Code Framework Web site:

Rapid publishing disclaimer

Microsoft corporation and/or its respective suppliers make no representations about the suitability, reliability, or accuracy of the information and related graphics contained herein. All such information and related graphics are provided "as is" without warranty of any kind. Microsoft and/or its respective suppliers hereby disclaim all warranties and conditions with regard to this information and related graphics, including all implied warranties and conditions of merchantability, fitness for a particular purpose, workmanlike effort, title and non-infringement. You specifically agree that in no event shall Microsoft and/or its suppliers be liable for any direct, indirect, punitive, incidental, special, consequential damages or any damages whatsoever including, without limitation, damages for loss of use, data or profits, arising out of or in any way connected with the use of or inability to use the information and related graphics contained herein, whether based on contract, tort, negligence, strict liability or otherwise, even if Microsoft or any of its suppliers has been advised of the possibility of damages.